CVE-2012-5951

CVE-2012-5951 affects IBM Tivoli NetView for z/OS (NetView vXrX in v5.1–5.4 and v6.1; 1.4) and enables local privilege escalation by abusing USS security level. Exploitation details in connected docs show: locate cnmeunix at /usr/lpp/netview/vXrX/bin/cnmeunix (vXrX ≥5.1 and ≤5.4 or =6.1) and run ...

CVE-2012-5951: Undefined Security Weakness

Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privileges by leveraging access to the normal Unix System Services USS security level...

IBM WebSphere Application Server for z/OS HTTP Server组件任意命令执行漏洞

BUGTRAQ ID: 57010 CVECAN ID: CVE-2012-5955 WebSphere是IBM的集成软件平台。它包含了编写、运行和监视全天候的工业强度的随需应变Web应用程序和跨平台、跨产品解决方案所需要的整个中间件基础设施，如服务器、服务和工具。 IBM WebSphere Application Server for z/OS 5.3及其他版本在HTTP服务器组件5.3版本内存在安全漏洞，可允许远程攻击者执行任意命令。 0 IBM Websphere Application Server 5.x 厂商补丁： IBM ---...

IBM Rational Developer for System z Information Disclosure Vulnerability (Windows)

This host is installed with IBM Rational Developer for System z and is prone information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmrationaldeveforsystemzinfodiscvulnwin.nasl 5366 2017-02-20 13:55:38Z cfi $ IBM Rational Developer for System z Information Disclosure Vulnerabili...

IBM Rational Developer for System z Information Disclosure Vulnerability - Windows

IBM Rational Developer for System z is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Code injection

Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server WAS for z/OS allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2012-5955

Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server WAS for z/OS allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2012-5955

Technical details about CVE-2012-5955 are not publicly provided in the connected documents. Monitor for updates from IBM/NVD and vendors for affected versions, impact, and remediation.

PT-2012-6207

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS for z/OS version 5.3 Description The issue allows remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified. Recommendations For version 5.3, at the moment, the...

CVE-2012-5955: Undefined Security Weakness

Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server WAS for z/OS allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2012-4862

CVE-2012-4862 concerns the IBM Rational Developer for System z product family (versions 7.1 through 8.5.1). The issue is an information disclosure where the Host Connect emulator does not properly store the SSL certificate password, enabling local users to obtain sensitive information through uns...

CVE-2012-4862: Undefined Security Weakness

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors...

PT-2012-5615

Name of the Vulnerable Software and Affected Versions IBM Rational Developer for System z versions 7.1 through 8.5.1 Description The issue concerns the Host Connect emulator, which does not properly store the SSL certificate password. This allows local users to obtain sensitive information...

IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An error exists related to 'Application Snoop Servlet' and missing access controls. This error can allow sensitive information...

IBM WebSphere Application Server for z/OS CBIND检查绕过漏洞

CVE ID: CVE-2012-3311 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS 8.5、8.0-8.0.0.4、7.0-7.0.0.23、6.1.0-6.1.0.43版本在执行CBIND检查时存在错误，成功利用后可绕过某些安全限制，访问或修改非法应用数据。 0 IBM Websphere Application Server 8.5.x IBM Websphere Application Server 8.0.x IB...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users ...

CVE-2012-3311: Undefined Security Weakness

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users ...

spice-gtk security update

0.11-11.el63.1 - Fix version for Z-stream Related: rhbz854823 0.11-12 - Add patch fixing CVE-2012-3524 Resolves: rhbz854823...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

CVE-2012-2980: Undefined Security Weakness

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...